From owner-freebsd-security Fri Jan 21 4:32:25 2000 Delivered-To: freebsd-security@freebsd.org Received: from smtp05.wxs.nl (smtp05.wxs.nl [195.121.6.57]) by hub.freebsd.org (Postfix) with ESMTP id 8B8DE151FF for ; Fri, 21 Jan 2000 04:32:22 -0800 (PST) (envelope-from asmodai@wxs.nl) Received: from daemon.ninth-circle.org ([195.121.196.111]) by smtp05.wxs.nl (Netscape Messaging Server 4.05) with ESMTP id FOOQTX00.U3H; Fri, 21 Jan 2000 13:32:21 +0100 Received: (from asmodai@localhost) by daemon.ninth-circle.org (8.9.3/8.9.3) id NAA07200; Fri, 21 Jan 2000 13:32:17 +0100 (CET) (envelope-from asmodai) Date: Fri, 21 Jan 2000 13:32:16 +0100 From: Jeroen Ruigrok/Asmodai To: Omachonu Ogali Cc: jamiE rishaw - master e*tard , Tom , Mike Tancsa , freebsd-security@freebsd.org Subject: Re: bugtraq posts: stream.c - new FreeBSD exploit? Message-ID: <20000121133216.D6965@daemon.ninth-circle.org> References: <20000120130945.B24082@x.arpa.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from oogali@intranova.net on Fri, Jan 21, 2000 at 06:21:15AM -0500 Organisation: Ninth-Circle Enterprises Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org -On [20000121 13:21], Omachonu Ogali (oogali@intranova.net) wrote: >Could you give us a snippet of the syslog output from the FreeBSD machine? I tested it on two CURRENT boxes. No panics, no crash, nothing in the syslog, just weird packets over the wire. I could still type through my ssh connections, use top. Albeit a bit more slowly. Could be that the 10 MB segment (connecting the machines in that segment with a hub) could saturated too much. Also, when running stream I got these from the program: jess: No buffer space available jess: No buffer space available jess: No buffer space available jess: No buffer space available Which seems that there's some throttling going on due to no buffers being free. Also netstat -m on both boxes isn't scary to behold and the nbmclusters are in the range of 1500. Just some observations, -- Jeroen Ruigrok vd W/Asmodai asmodai@[wxs.nl|bart.nl|freebsd.org] Documentation nutter/B-rated Coder BSD: Technical excellence at its best The BSD Programmer's Documentation Project Ain't gonna spend the rest of my Life, quietly fading away... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message